Privacy Policy

Last updated: 8 September 2025

Last updated: 4 September 2025

Introduction

Welcome to Pilates by Ang. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website, book classes, or interact with our services.

This policy applies to our website, online booking system, and all related services. By using our services, you agree to the practices described in this policy.

Who We Are

We are Pilates By Ang Ltd ("we", "us"). We are the controller of personal data processed via our website and in-studio operations. For privacy questions or to exercise your rights: contact@pilatesbyang.com.

Payment Processing

Online Bookings and Account Management

Online bookings and account management are provided via the Mindbody platform. Your contract for classes is with Pilates By Ang Ltd; Mindbody provides the platform. When you use Mindbody, their own terms and privacy policy apply in addition to this notice (last checked: 4 Sept 2025).

Links: Mindbody Consumer AgreementMindbody Privacy Policy

In-Person Purchases at Our Studio

In-person purchases at our studio are paid using Tide (for example,Tap to Pay on iPhone or a Tide Card Reader). Card details are processed by Tide and its payment partners; we do not collect or store your card details on our website. Tide's own terms and privacy policy apply to the payment service (last checked: 4 Sept 2025).

Links: Tide Payments overviewTide Privacy Policy

Data We Collect

We collect information you provide, details about your bookings and attendance, communications with us, limited device/cookie data from our website, and—if you choose to provide it—health/suitability information (e.g., PAR-Q). For in-person payments, we may see limited payment metadata on our Tide receipts (e.g., transaction ID, amount, masked card details), but we do not receive your full card number or security code.

Health Information (Special Category Data)

Health data is considered "special category" data under UK GDPR and requires explicit consent for processing. We may collect health and fitness information if you choose to provide it, such as PAR-Q responses or information about medical conditions that may affect exercise participation.

Legal Basis: We process health information based on your explicit consent. You may withdraw your consent at any time, though this may affect our ability to provide safe exercise instruction.

How We Use Your Data

We use your data to provide and administer classes and accounts, keep our service safe, send service updates, improve our website (with your cookie preferences), and—only if you opt in—send marketing. For health information we rely on your explicit consent.

Cookies & Analytics

Our website uses essential cookies and, with your consent, non-essential cookies/analytics. You can change choices any time via Cookie settings. See our Cookie Policy for details.

Sharing with Service Providers

We share limited data with service providers who help us operate our business (e.g., booking/scheduling,in-person payment processing, communications, hosting/IT/security, analytics). Some act as our processors; others provide their own services as independent controllers. We require appropriate safeguards.

Marketing Communications and Preferences

We may send you marketing communications about our classes, special offers, and studio updates. You can opt out at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Contacting us directly at contact@pilatesbyang.com
  • Updating your preferences in your Mindbody account

Even if you opt out of marketing, we may still send you important service-related communications about your bookings and account.

Data Retention

We keep personal data only as long as necessary for the purposes described, including to meet legal/accounting requirements and to resolve or defend claims. We apply documented criteria to determine appropriate retention and deletion.

Your Rights

You can ask to access, correct or delete your data, restrict or object to certain uses, or request portability. Where we rely on consent (e.g., marketing or health data), you can withdraw consent at any time. You may complain to the UK Information Commissioner's Office (ICO).

International Transfers

Where personal data is transferred outside the UK/EEA, we use safeguards permitted by UK law (for example, an adequacy decision or appropriate contractual measures).

Changes to This Policy

If we change how we process personal data, we'll update this notice and change the “Last updated” date above.

Contact Information

For privacy questions or to exercise your rights: contact@pilatesbyang.com

Related Policies: Please also review our Cookie Policy and Terms & Conditions for complete information about our practices.